1. Source of data

The personal data being processed are collected directly from the data subject.

2. Recipients

This Notice applies to users of the website. In the rest of the text, the subjects indicated above are indicated as “data subject“ in the processing of personal data.

3. Types of data processed

The data subject to processing are: personal data, contact details data.

In relation to navigation data, please refer to the specific cookie notice in the “Cookie policy" section of the website.

4. Purpose, legal basis of the processing and data retention period

Personal data will be collected directly from the data subject, and will be processed for the following purposes:

1. Purpose of processing, the legal basis of which lies in the execution of the contract
   • For the completion of the response procedures to the data subject following requests received through the channels indicated on the website or through specific areas of the website directly or through subsidiaries / parent companies or associates of the Data Controller and companies in joint venture.

For this type of processing, a specific data retention period has been defined which provides for their retention ten years from the date of acquisition.

5. Processing methods

In relation to the aforementioned purposes, the data will be processed both in paper and computerized form, in any case by means of suitable tools to guarantee their security, confidentiality, integrity and availability through the adoption of adequate security measures, so as required by the Regulations.

6. Categories of data recipients

The persons authorized and duly instructed by the Data Controller or by the Data Processors may become aware of the personal data of the data subject. Furthermore, third parties may become aware of it, namely: service providers, consultants and employees of Group companies.

7. Dissemination of data

Your personal data without your specific authorization will in no way be disclosed outside the company perimeter and / or published on the company’s website, except as required by law.

8. Data Controller and Data Processors

The Data Controller, that is the person who determines the purposes, is Trireme S.r.l.. The Data Processors, that is the subjects who carry out the processing on behalf of the Data Controller, are the companies of the Group and the service providers appointed as such pursuant to the Regulations 2016/679 by the Data Controller.

9. Exercise of rights

Finally, we remind you that pursuant to Reg. 2016/679, you have the right to access your data, in particular to obtain confirmation of the existence or otherwise of the same at any time and to know its content, origin, the geographical location, as well as to ask for a copy. You also have the right to verify its accuracy or request its integration, updating, rectification, limitation of processing, cancellation, transformation into anonymous form or blocking of data processed in violation of the law, as well as to oppose in any case to their processing. Furthermore, you have the right to request data portability, to lodge a complaint with the Supervisory Authority.

The data subject can exercise their rights by writing to the attention of the Data Controller by e-mail to privacy.edisonnext@gruppoedison.it or by FAX to the number 02/62229106